Privacy Policy

Effective Date: October 21, 2025 · Last Updated: September 21, 2026

Basta & Company, also doing business as BastaCPA (“BastaCPA,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal, business, and financial information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit BastaCPA.com, contact us, subscribe to our communications, use our client portals or related technology, or engage us for accounting, tax, fractional CFO, or advisory services.

Our services are primarily provided to businesses and their owners. Because our professional services may require access to confidential financial and tax information, we take the privacy and security of that information seriously.

1. Scope of This Privacy Policy

This Privacy Policy applies to information we collect through:

BastaCPA.com and related webpages;
Contact, consultation, and intake forms;
Newsletter and marketing signups;
email, telephone, video meetings, and other communications;
Secure client portals and document exchange systems;
Accounting, payroll, tax, financial reporting, and other systems used in connection with our professional services;
Events, webinars, or educational programs we may offer;
Interactions with prospective clients; and
Our accounting, tax, fractional CFO, and advisory engagements.

Additional terms, engagement letters, consents, or notices may apply to certain services. If there is a conflict between this Privacy Policy and a specific engagement agreement regarding confidential client information, the applicable engagement agreement and professional requirements will govern.

2. Information We Collect

The information we collect depends on how you interact with us and the services we provide.

A. Information You Provide Directly

We may collect information such as:

name;
email address;
telephone number;
mailing or business address;
company name;
job title or role;
information submitted through contact or consultation forms;
information provided when scheduling meetings;
communications and correspondence with our team;
newsletter subscription information; and
information you provide when requesting or receiving our professional services.

B. Client Financial, Tax, and Business Information

When you become a client, or provide information as part of evaluating an engagement, we may receive information necessary to provide accounting, tax, fractional CFO, or advisory services.

Depending on the engagement, this may include:

financial statements;
general ledger and bookkeeping records;
bank and credit card information;
transaction records;
invoices and accounts receivable information;
bills and accounts payable information;
payroll records;
employee or contractor information;
tax returns and tax documentation;
taxpayer identification information;
ownership and entity information;
compensation information;
financial projections, budgets, and forecasts;
business contracts and supporting documentation; and
other information reasonably necessary to perform the services for which we have been engaged.

Some of this information may constitute sensitive personal information under applicable law.

We collect and use sensitive information only as reasonably necessary to provide our professional services, maintain security, meet legal or professional obligations, or for other purposes permitted by applicable law.

3. Information About Employees, Contractors, Customers, Vendors, and Other Individuals

In providing accounting, payroll oversight, tax, financial reporting, or advisory services to a business, we may receive personal information relating to individuals who are not themselves our clients.

This may include information about:

employees;
independent contractors;
owners and shareholders;
partners or members;
customers;
vendors;
service providers;
beneficiaries;
family members where relevant to tax matters; or
other individuals connected with a client’s business or financial affairs.

When you provide us with information relating to another individual or organization, you represent that you are authorized to provide the information to us and that you have obtained any consent required by applicable law.

We use such information only as reasonably necessary to perform the applicable engagement, comply with legal and professional obligations, operate our business, or as otherwise permitted by law.

4. Information We Collect Automatically

When you visit our website, certain information may be collected automatically through cookies, pixels, analytics tools, server logs, and similar technologies.

This information may include:

Internet Protocol (IP) address;
browser and device type;
operating system;
pages viewed;
links clicked;
referring and exit pages;
approximate geographic location derived from an IP address;
date and time of visits;
time spent on pages;
interactions with website content;
cookie or device identifiers; and
interactions with our marketing emails or digital advertising.

We may use this information to understand how visitors use our website, maintain security, improve our content and services, measure marketing effectiveness, and improve website performance.

5. Information From Other Sources

Where appropriate and permitted by law, we may receive information from other sources in connection with our professional services or business operations.

These sources may include:

financial institutions;
accounting and bookkeeping platforms;
payroll systems;
payment platforms;
government agencies and tax authorities;
client-authorized software integrations;
other professional advisors;
your employees or representatives;
referral sources;
publicly available sources; and
technology and service providers.

We only seek information reasonably related to legitimate business or professional purposes.

6. How We Use Information

We may use information we collect to:

provide accounting, bookkeeping, tax, fractional CFO, and advisory services;
prepare financial statements, tax filings, reports, forecasts, and related deliverables;
communicate with clients and their authorized representatives;
respond to inquiries and consultation requests;
evaluate whether our services are appropriate for a prospective client;
onboard and manage client relationships;
process and exchange documents securely;
coordinate with authorized financial institutions, government agencies, and professional advisors;
provide client portal access;
schedule and conduct meetings;
process payments and administer billing;
send newsletters, educational resources, service updates, and other communications;
personalize and improve our website;
measure website and marketing performance;
maintain and improve the security of our systems;
detect fraud, misuse, or security threats;
maintain internal business and professional records;
comply with applicable tax, accounting, legal, regulatory, and professional requirements;
establish, exercise, or defend legal rights; and
fulfill other purposes disclosed to you at the time information is collected.

We seek to limit our collection and use of information to what is reasonably necessary for the applicable purpose.

7. Professional Confidentiality

Information provided to us in connection with an accounting, tax, or advisory engagement may also be subject to professional confidentiality requirements, applicable tax laws, engagement agreements, and professional standards.

Access to confidential client information is limited to personnel and service providers who reasonably require access to perform their responsibilities.

Our employees and contractors are expected to maintain the confidentiality of information they access in connection with their work for BastaCPA.

8. How We Disclose Information

We do not disclose personal, business, or financial information except as reasonably necessary for legitimate business or professional purposes, as authorized by you, or as permitted or required by law.

We may disclose information to the following categories of recipients.

Service Providers

We use third-party providers to support our operations and professional services, including providers of:

accounting and bookkeeping technology;
payroll technology;
tax software;
practice management systems;
secure document exchange and file storage;
cloud hosting;
communications and email;
scheduling and videoconferencing;
payment processing;
website hosting;
analytics;
cybersecurity;
marketing technology; and
other operational services.

These providers may process information on our behalf to perform services for us.

Professional Advisors and Engagement Support

Where appropriate, information may be disclosed to accountants, tax professionals, consultants, attorneys, subcontractors, or other professionals assisting with an engagement, subject to applicable confidentiality requirements.

Government and Legal Authorities

We may preserve or disclose information when we reasonably believe doing so is necessary to:

comply with applicable laws or regulations;
respond to a valid subpoena, court order, tax authority request, or other legal process;
meet professional or regulatory requirements;
prevent fraud or security incidents;
protect the safety of individuals; or
protect our rights, property, systems, clients, or others.

Nothing in this Privacy Policy is intended to waive any legal rights, defenses, objections, privileges, or protections that may apply to a request for information.

9. Service Providers and International Processing

BastaCPA operates using cloud-based technology and may work with employees, contractors, and technology providers located in different states or countries.

As a result, information may be stored or processed outside the state or country in which it was originally collected.

When we use service providers to process information, we seek to work with providers that maintain appropriate administrative, technical, and organizational safeguards.

Information processed in another jurisdiction may be subject to the laws and lawful governmental requests of that jurisdiction.

10. Cookies, Analytics, and Similar Technologies

BastaCPA.com may use cookies, pixels, analytics technologies, and similar tools to:

operate the website;
remember preferences;
understand website usage;
measure traffic and engagement;
maintain security;
identify technical problems;
evaluate the effectiveness of marketing campaigns; and
improve our website and content.

Our website may use third-party analytics and measurement services, including tools provided by companies such as Google and social or advertising platforms.

These technologies may collect information such as IP addresses, cookie identifiers, device information, pages visited, referral information, and website interactions.

You may be able to manage certain cookies through your browser settings or through any cookie controls we make available on our website. Blocking certain cookies may affect website functionality.

11. Analytics, Advertising, and Online Privacy

We may use analytics, advertising, and measurement technologies to understand how visitors use our website, evaluate the effectiveness of our marketing, and improve our website and services.

These technologies may collect information such as your IP address, browser or device information, pages visited, referral information, and interactions with our website.

We do not sell client financial, tax, accounting, payroll, or other confidential engagement information for marketing purposes.

We also do not sell personal information in exchange for money.

Some third-party analytics or advertising providers may independently collect or process online identifiers and website activity according to their own privacy practices.

You may manage certain cookies through your browser settings or through any cookie or privacy controls on your browser.

12. Email, Newsletter, and Marketing Communications

If you subscribe to our newsletter, download certain resources, submit an inquiry, or otherwise request communications from us, we may use your contact information to send:

educational content;
newsletters;
tax and accounting updates;
invitations to events or webinars;
information about our services; and
other relevant business communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the message.

We may continue sending non-marketing communications necessary to administer an existing client relationship or professional engagement.

We do not sell our newsletter subscriber list.

13. Telephone and Text Communications

If you provide a telephone number and consent to receive calls or text messages, we may use that number for communications consistent with your consent and our relationship with you.

No mobile information will be shared with third parties or affiliates for their own marketing or promotional purposes.

Text messaging originator opt-in data and consent will not be shared with third parties for marketing purposes.

Service providers used to facilitate communications may process information as necessary to provide those services.

You may opt out of marketing text messages as described in the applicable message or consent process.

14. Meetings, Calls, and Recordings

We may communicate with clients and prospective clients through telephone calls, videoconferences, or online meetings.

If a meeting or communication is recorded, transcribed, or processed using meeting-assistance technology, we will provide notice or obtain consent when required by applicable law.

Recordings or transcripts may be used for legitimate business purposes such as documenting discussions, preparing meeting notes, improving service delivery, training, or maintaining engagement records.

15. Data Retention

We retain information for only as long as reasonably necessary for the purposes for which it was collected and to meet our legal, tax, regulatory, professional, contractual, security, and business obligations.

Retention periods may differ depending on the type of information.

For example:

client accounting and tax records may be retained in accordance with professional, legal, tax, and engagement requirements;
engagement communications and work records may be retained for professional and business purposes;
billing records may be retained to satisfy accounting and tax obligations;
marketing records may be retained until they are no longer reasonably needed or you withdraw consent where applicable; and
website analytics and technical information may be retained according to the settings and policies of the systems we use.

When information is no longer reasonably required, we may securely delete, destroy, or anonymize it, subject to applicable legal and professional requirements.

16. Data Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, loss, or destruction.

Depending on the system and information involved, safeguards may include:

encrypted website connections;
secure client portals and document exchange systems;
restricted access to client information;
authentication and account-security controls;
multifactor authentication for appropriate systems;
secure cloud-based systems;
backups;
security monitoring; and
internal confidentiality requirements.

We regularly evaluate the technologies and processes used to protect client information.

No electronic transmission, storage system, or security measure can guarantee absolute security. Accordingly, we cannot guarantee that information will never be accessed, disclosed, altered, lost, or destroyed despite reasonable safeguards.

17. Privacy Requests

You may contact us if you would like to:

ask what personal information we maintain about you;
correct inaccurate contact information;
request deletion of information where appropriate;
unsubscribe from marketing communications; or
ask a question about how we handle your personal information.

Requests may be submitted to iSupport@bastacpa.com

We will review requests in accordance with applicable law and our professional, tax, accounting, security, and record-retention obligations.

Certain information may need to be retained even after a request for deletion, including information associated with accounting, tax, financial reporting, legal, regulatory, or professional obligations.

We may take reasonable steps to verify your identity before responding to a request involving personal or confidential information.

18. California Residents

If you are a California resident, you may have additional privacy rights under California law depending on the circumstances and the applicability of those laws.

BastaCPA will respond to applicable privacy requests in accordance with the requirements that apply.

Nothing in this section limits any privacy rights available to you under applicable law.

California privacy requests may be submitted to iSupport@bastacpa.com.

19. Accuracy of Client Information

Accurate information is important to the accounting, tax, and advisory services we provide.

We rely in part on clients and their authorized representatives to provide accurate, complete, and current information.

Please notify us when information relevant to your engagement changes or if you believe information in our records is inaccurate.

20. Business Transfers

If BastaCPA is involved in a merger, acquisition, financing, reorganization, sale of assets, succession transaction, or similar business transaction, information may be reviewed or transferred as part of that transaction.

Where appropriate, we will take reasonable measures to protect confidential information and require appropriate confidentiality arrangements during the transaction.

21. Third-Party Websites and Services

Our website and communications may contain links to websites or services operated by third parties, including client portals, software providers, payment providers, scheduling platforms, social media platforms, or other services.

We do not control the privacy, security, or information practices of independent third parties.

When you interact directly with another provider, its privacy policy and terms apply. We encourage you to review those policies before providing personal information.

22. Children's Privacy

Our website and professional services are intended for adults and businesses and are not directed to children.

We do not knowingly collect personal information directly from children through our website for marketing purposes.

Information concerning a minor may occasionally be included in tax, payroll, financial, or other documentation provided by an authorized client where reasonably necessary to perform professional services.

Such information will be handled as part of the applicable professional engagement.

23. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

our services;
our technology;
our business practices;
applicable laws or regulations; or
our privacy and security practices.

When we make changes, we will update the “Last Updated” date at the top of this page.

Material changes may also be communicated through our website or other reasonable means when appropriate.

We encourage you to review this Privacy Policy periodically.

24. Contact Us

Questions, concerns, or requests regarding this Privacy Policy or our handling of personal information may be directed to:

Basta & Company / BastaCPA
100 Pine Street, Suite 1250
San Francisco, CA 94111

Email: iSupport@bastacpa.com
Phone: 415-333-6262
Website: BastaCPA.com

We will review privacy inquiries and respond as appropriate under applicable law.

This Privacy Policy describes BastaCPA’s general privacy practices. It does not modify the terms of any engagement agreement or create contractual rights beyond those provided by applicable law.